Security Scan Report: earnbig.top

Redirected to:
https://earnbig.top/#/pages/guide/guide
Submitted: Apr 6, 2026, 6:37:04 AMCompleted: Apr 6, 2026, 6:38:46 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 31 HTTP transactions. The main domain is earnbig.top and was registered NaN years ago.

Submitted URL: http://earnbig.top/

Effective URL: https://earnbig.top/#/pages/guide/guideRedirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

New site with heavily obfuscated script but no malicious indicators; treat as moderate risk.

Risk Factors
Critical new domain (age < 7 days)
Highly obfuscated JavaScript (critical obfuscation score)
Safety Factors
No credential or payment forms present
No malicious Indicators of Compromise detected
No YARA JavaScript malware patterns matched
No network IDS alerts
Uses standard external resources (cdn.dcloud.net.cn, connect.facebook.net)
Domain age information unavailable

Details

Page Title

EarnBig

Scan Type

public

Language

🇩🇪

German

(43% confidence)

Category

government public service

(48%)

Domain Information

You're looking at domain 'earnbig.top' on the .top top-level domain without a subdomain. The registrable portion 'earnbig' spans 7 characters holding 3 vowels versus four consonants. Splitting it apart reveals 2 words: earn, big. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://earnbig.top/

Page Load Overview

2.14s
Total Load Time
34
HTTP Requests
2
Domains
153 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Language Code:de
Detection Confidence:43%
Script Type:Latin
HTML Lang Attribute:en
Text Length:70 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

government public service48% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
48%
news media journalism
47%
gambling betting
33%
finance banking
29%
real estate property
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
11124.222.174.117Germany
11104.21.38.34United States
AS13335Cloudflare, Inc.
343--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11B2296303405392B523767C1F4B1CB0D2513B325D70649A8EBFA1756ABC9CEA4CB6EB9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:PjJ6yYgScy9ws+UGRsigyrEFZ5LaRkOLaRlRLaRDlLaRFs6pnx/WTzhBeC39P+4J:LJ6CXHRwFZ5LaRkOLaRlRLaRDlLaRFsf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10656:BdcgKwgYCzQgkU1DXJoCFEgMQQBQZWuJOBCiAQDHCDMDGMWQA0QICLO0yxQwAbFAJECCw0ZBFAKGQUcYMJbIQCLFjrhEBCjE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7c3e7fffefeff
Perceptual Hash:f722cfdd8875208c
Difference Hash:0c080c0c00000000
Wavelet Hash:e0e4c0c00f0e0e0f
Color Hash:#abac53

Other Hashes

Crop Resistant:0c080c0c00000000

Scan History

Scan history not available

Unable to load historical scan data